Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34323a3a2f34382d3438203d3e203237373230.roa
File:                     323830343a6461343a34323a3a2f34382d3438203d3e203237373230.roa (raw, json)
Hash identifier:          wwk70VGbFXfkLdcrvxVxeeHZuZH1zKq+4QPfAISRc8s=
Subject key identifier:   48:B3:1C:70:AF:FA:FD:F7:28:C4:45:7B:41:D6:20:1D:D3:39:C5:FE
Certificate issuer:       /CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
Certificate serial:       5860C4EC9BA939826C8AA01899F1B0B167C1DBC1
Authority key identifier: 76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34323a3a2f34382d3438203d3e203237373230.roa
Signing time:             Thu 10 Sep 2026 20:08:08 +0000
ROA not before:           Thu 10 Sep 2026 20:03:08 +0000
ROA not after:            Thu 09 Sep 2027 20:08:08 +0000
asID:                     27720
IP address blocks:        2804:da4:42::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl
                          rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 11:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:60:c4:ec:9b:a9:39:82:6c:8a:a0:18:99:f1:b0:b1:67:c1:db:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76F5CCF75E8194C9E671D2D9F557611D272E2857
        Validity
            Not Before: Sep 10 20:03:08 2026 GMT
            Not After : Sep  9 20:08:08 2027 GMT
        Subject: CN=48B31C70AFFAFDF728C4457B41D6201DD339C5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f9:64:4b:25:82:19:cb:c7:64:81:d4:b7:ba:
                    0f:7f:05:a1:4d:2f:3b:2c:fe:2c:dc:d9:1a:70:24:
                    1e:47:e1:7a:2d:40:8f:f9:1a:50:4e:87:eb:0c:93:
                    08:de:21:75:3b:09:ca:4e:28:19:dc:c4:36:30:92:
                    45:1a:cf:15:25:13:aa:76:67:84:37:b5:cf:f1:29:
                    13:a3:e9:c1:e3:fb:05:e2:fa:37:f4:d4:1a:56:c7:
                    d6:c5:4e:31:4f:28:fc:a3:16:18:c8:e7:b4:8b:ce:
                    19:5a:83:7a:37:70:ab:db:ae:50:12:b6:67:81:f1:
                    e6:e1:6c:37:07:c6:c0:0d:db:29:3d:74:1a:55:81:
                    e5:a1:cf:19:a8:2e:d0:f5:81:43:9f:83:8d:5f:d5:
                    63:66:bf:9c:02:de:fc:a3:d0:f8:01:c7:8d:00:30:
                    39:f2:bb:3a:45:2e:cb:9a:4d:fc:0a:f9:c7:b9:e0:
                    c0:56:07:53:c9:f9:8a:df:01:a5:1d:57:6e:74:e5:
                    ba:88:ed:b1:5b:eb:ee:ed:09:b4:d2:76:ec:58:ac:
                    29:21:ce:74:78:60:df:d4:87:97:53:a1:22:61:60:
                    f4:ac:ca:35:7d:40:ff:52:4d:9e:f1:8e:50:35:2f:
                    a9:04:d5:1b:56:5f:b8:87:0f:00:f0:65:15:1b:3c:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B3:1C:70:AF:FA:FD:F7:28:C4:45:7B:41:D6:20:1D:D3:39:C5:FE
            X509v3 Authority Key Identifier:
                keyid:76:F5:CC:F7:5E:81:94:C9:E6:71:D2:D9:F5:57:61:1D:27:2E:28:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/76F5CCF75E8194C9E671D2D9F557611D272E2857.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/76F5CCF75E8194C9E671D2D9F557611D272E2857.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F76KiF7NcE7gA2A8WnuA65kz6g7cYZhKupwtsPtmMwzU/0/323830343a6461343a34323a3a2f34382d3438203d3e203237373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:da4:42::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:99:20:19:62:50:6c:de:b3:cd:0c:7b:ae:84:4b:6d:f8:
         bf:2a:fd:d0:4f:0a:eb:9a:64:48:52:2a:4f:6d:ab:56:cd:78:
         18:da:a9:16:34:0b:c6:96:41:00:e9:bf:dd:de:fe:68:41:4f:
         cd:01:c7:a4:4e:86:85:9b:24:45:d8:5f:fd:4c:1c:ad:90:a8:
         50:79:b1:77:9f:c9:17:95:b1:66:58:60:d9:68:39:f1:47:e0:
         45:48:69:f7:ba:62:5a:3a:6b:fc:7b:e3:bb:16:86:11:d0:1f:
         a6:e9:62:7a:6c:e2:e9:cd:df:7a:7a:f0:5f:cb:d2:f2:d8:8a:
         d4:ef:41:19:01:19:9e:27:2d:91:fa:b5:8b:f2:17:4b:d1:75:
         2b:d1:42:ac:d2:62:56:81:2b:a0:8e:3f:8e:69:4c:e1:1b:0e:
         02:6e:ab:76:d5:23:00:85:9c:68:c2:0b:2e:37:2a:d9:d1:15:
         48:65:1d:e8:d2:55:e5:cd:cd:63:b0:8d:6c:da:e3:4a:dd:65:
         96:0d:26:fb:79:1c:83:25:39:12:86:d8:7d:dd:18:4b:d2:f3:
         e1:ba:c4:70:89:3a:f3:d2:12:ae:a5:b3:90:2a:9d:92:a7:74:
         31:3b:7a:0f:32:a6:70:cf:10:4a:04:21:10:42:d5:95:3d:32:
         9b:53:b4:ed
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgIUWGDE7JupOYJsiqAYmfGwsWfB28EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZGNUNDRjc1RTgxOTRDOUU2NzFEMkQ5RjU1NzYxMUQy
NzJFMjg1NzAeFw0yNjA5MTAyMDAzMDhaFw0yNzA5MDkyMDA4MDhaMDMxMTAvBgNV
BAMTKDQ4QjMxQzcwQUZGQUZERjcyOEM0NDU3QjQxRDYyMDFERDMzOUM1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs+WRLJYIZy8dkgdS3ug9/BaFN
Lzss/izc2RpwJB5H4XotQI/5GlBOh+sMkwjeIXU7CcpOKBncxDYwkkUazxUlE6p2
Z4Q3tc/xKROj6cHj+wXi+jf01BpWx9bFTjFPKPyjFhjI57SLzhlag3o3cKvbrlAS
tmeB8ebhbDcHxsAN2yk9dBpVgeWhzxmoLtD1gUOfg41f1WNmv5wC3vyj0PgBx40A
MDnyuzpFLsuaTfwK+ce54MBWB1PJ+YrfAaUdV2505bqI7bFb6+7tCbTSduxYrCkh
znR4YN/Uh5dToSJhYPSsyjV9QP9STZ7xjlA1L6kE1RtWX7iHDwDwZRUbPINJAgMB
AAGjggJUMIICUDAdBgNVHQ4EFgQUSLMccK/6/fcoxEV7QdYgHdM5xf4wHwYDVR0j
BBgwFoAUdvXM916BlMnmcdLZ9VdhHScuKFcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjc2S2lGN05jRTdnQTJBOFdudUE2NWt6Nmc3Y1laaEt1cHd0c1B0bU13
elUvMC83NkY1Q0NGNzVFODE5NEM5RTY3MUQyRDlGNTU3NjExRDI3MkUyODU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2RjVDQ0Y3NUU4MTk0QzlF
NjcxRDJEOUY1NTc2MTFEMjcyRTI4NTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3NktpRjdOY0U3Z0EyQThXbnVBNjVrejZnN2NZWmhLdXB3dHNQdG1Nd3pVLzAv
MzIzODMwMzQzYTY0NjEzNDNhMzQzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMy
MzczNzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwAoBA2kAEIwDQYJKoZIhvcNAQELBQADggEBAE/g
mSAZYlBs3rPNDHuuhEtt+L8q/dBPCuuaZEhSKk9tq1bNeBjaqRY0C8aWQQDpv93e
/mhBT80Bx6ROhoWbJEXYX/1MHK2QqFB5sXefyReVsWZYYNloOfFH4EVIafe6Ylo6
a/x747sWhhHQH6bpYnps4unN33p68F/L0vLYitTvQRkBGZ4nLZH6tYvyF0vRdSvR
QqzSYlaBK6COP45pTOEbDgJuq3bVIwCFnGjCCy43KtnRFUhlHejSVeXNzWOwjWza
40rdZZYNJvt5HIMlORKG2H3dGEvS8+G6xHCJOvPSEq6ls5AqnZKndDE7eg8ypnDP
EEoEIRBC1ZU9MptTtO0=
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:11 2026 by rpki-client